Playable version 9.18 for iOS suffers from script insertion and arbitrary file upload vulnerabilities.